Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/fe2ea3cf-aec4-3d5c-8f5d-9c0478fb9d45.roa
File:                     fe2ea3cf-aec4-3d5c-8f5d-9c0478fb9d45.roa (raw, json)
Hash identifier:          ti3iKh49BgBWEmodRjOxUYR9TQ74awOrLpalGJkzvVM=
Subject key identifier:   3B:F1:6F:C1:67:08:1A:58:B2:F5:3B:17:5D:4B:9C:BD:90:46:05:86
Certificate issuer:       /CN=3b5275cd-7d56-4cf1-953a-92ba38e28375
Certificate serial:       010D0C9F4328584E842A33C92850E4BB0F4419A0
Authority key identifier: 4E:4D:DD:B6:70:F7:B9:4A:AC:35:97:06:E9:2A:88:77:C8:91:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/fe2ea3cf-aec4-3d5c-8f5d-9c0478fb9d45.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     398218
IP address blocks:        206.166.200.0/24 maxlen: 24
                          2602:fd96:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/3b5275cd-7d56-4cf1-953a-92ba38e28375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/3b5275cd-7d56-4cf1-953a-92ba38e28375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:33:c9:28:50:e4:bb:0f:44:19:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5275cd-7d56-4cf1-953a-92ba38e28375
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=c8a1338e-9f32-450c-ad6a-1d0aef41edec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:82:63:12:cb:84:24:35:2b:58:ab:f7:a6:6c:
                    f6:8a:78:17:4d:72:40:f3:98:42:4d:b1:46:23:fc:
                    0f:3a:d5:aa:21:c3:b8:f8:3e:79:09:e0:21:25:73:
                    58:ed:99:6e:45:d3:9a:6b:7c:21:4b:91:bd:93:3a:
                    2c:5d:a9:06:26:17:78:48:23:31:d0:70:ca:aa:7b:
                    ac:be:4f:dc:91:fa:8b:91:a3:b0:fd:92:2f:42:05:
                    c3:62:c8:43:6c:87:79:96:03:6e:83:94:6e:a2:43:
                    83:6b:5f:e6:cd:e6:e9:5e:d9:9f:db:13:62:b2:46:
                    75:e1:fb:56:a1:68:fd:f5:9e:48:01:8f:5a:81:a6:
                    4b:0e:1e:db:b1:8a:e1:26:a1:f3:e1:0c:bf:d3:36:
                    13:e5:77:d8:0d:f2:9c:21:6c:98:d1:ed:4b:d6:2c:
                    94:cd:d2:8e:f3:24:49:50:9e:c7:42:f8:f8:3b:93:
                    03:f5:29:6c:69:7c:48:ad:53:09:b9:37:39:4d:59:
                    ca:14:59:73:e0:69:91:d3:17:a0:4a:14:02:7e:eb:
                    a7:e8:d2:c3:71:86:71:e6:4b:ce:39:1a:df:54:1f:
                    2f:43:b7:a1:3c:a4:71:a2:4b:cf:87:f3:95:24:fd:
                    35:e7:54:0f:d1:07:95:65:aa:28:e9:6d:29:e4:ff:
                    51:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:6F:C1:67:08:1A:58:B2:F5:3B:17:5D:4B:9C:BD:90:46:05:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/fe2ea3cf-aec4-3d5c-8f5d-9c0478fb9d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/3b5275cd-7d56-4cf1-953a-92ba38e28375.crl

            X509v3 Authority Key Identifier:
                keyid:4E:4D:DD:B6:70:F7:B9:4A:AC:35:97:06:E9:2A:88:77:C8:91:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.166.200.0/24
                IPv6:
                  2602:fd96:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:8c:03:07:e9:58:df:89:c1:f0:78:63:88:4c:79:37:38:d8:
         7f:a0:e5:3e:0f:1f:e1:68:3e:b0:8d:99:9e:2a:ab:64:8a:02:
         9f:30:81:7c:8c:b0:b2:2c:26:59:0b:ad:ba:e0:8f:2f:57:d5:
         18:0d:fa:7f:54:af:e9:af:a9:79:d3:bb:38:98:c7:66:e1:9d:
         6f:81:57:b9:49:05:02:9f:3f:69:cf:6b:78:29:7a:6a:ce:2b:
         f1:b8:99:51:70:2f:89:e7:17:f3:eb:0d:b8:1f:cd:4d:db:d3:
         2c:2b:7b:b2:8c:c4:0d:cf:4a:e0:13:b8:6d:ea:8b:46:c9:37:
         5a:32:f1:91:93:bf:f8:71:59:88:60:8f:b4:dd:25:f3:a4:e2:
         77:41:ec:46:a4:e6:2a:96:a9:49:7b:16:4c:13:f9:c4:9b:da:
         f9:c1:98:dc:19:eb:04:eb:f9:d8:84:b5:c2:73:35:97:03:bb:
         fc:d2:9a:b0:ef:7a:68:1d:ee:b7:39:72:5a:e1:f9:89:ef:e2:
         87:30:b3:84:ea:80:0a:93:0a:7e:8c:a1:14:f7:10:5f:3e:86:
         ef:ae:74:77:f0:a2:ac:b9:df:93:c8:43:81:10:dd:a8:4f:c3:
         15:2b:52:29:4f:b0:15:52:be:a6:1b:dd:c8:1f:b5:f2:5f:b5:
         b7:95:ea:4e
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE6EKjPJKFDkuw9EGaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I1Mjc1Y2QtN2Q1Ni00Y2YxLTk1M2EtOTJiYTM4ZTI4
Mzc1MB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk
YzhhMTMzOGUtOWYzMi00NTBjLWFkNmEtMWQwYWVmNDFlZGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYJjEsuEJDUrWKv3pmz2ingXTXJA85hCTbFG
I/wPOtWqIcO4+D55CeAhJXNY7ZluRdOaa3whS5G9kzosXakGJhd4SCMx0HDKqnus
vk/ckfqLkaOw/ZIvQgXDYshDbId5lgNug5RuokODa1/mzebpXtmf2xNiskZ14ftW
oWj99Z5IAY9agaZLDh7bsYrhJqHz4Qy/0zYT5XfYDfKcIWyY0e1L1iyUzdKO8yRJ
UJ7HQvj4O5MD9SlsaXxIrVMJuTc5TVnKFFlz4GmR0xegShQCfuun6NLDcYZx5kvO
ORrfVB8vQ7ehPKRxokvPh/OVJP0151QP0QeVZaoo6W0p5P9R/QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFDvxb8FnCBpYsvU7F11LnL2QRgWGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjUy
NzVjZC03ZDU2LTRjZjEtOTUzYS05MmJhMzhlMjgzNzUvZmUyZWEzY2YtYWVjNC0z
ZDVjLThmNWQtOWMwNDc4ZmI5ZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I1Mjc1Y2QtN2Q1Ni00Y2YxLTk1
M2EtOTJiYTM4ZTI4Mzc1LzNiNTI3NWNkLTdkNTYtNGNmMS05NTNhLTkyYmEzOGUy
ODM3NS5jcmwwHwYDVR0jBBgwFoAUTk3dtnD3uUqsNZcG6SqId8iRZ4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjUyNzVjZC03ZDU2LTRjZjEtOTUzYS05MmJh
MzhlMjgzNzUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzqbIMA8E
AgACMAkDBwAmAv2WAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALIwDB+lY34nB8HhjiEx5NzjYf6DlPg8f
4Wg+sI2ZniqrZIoCnzCBfIywsiwmWQutuuCPL1fVGA36f1Sv6a+pedO7OJjHZuGd
b4FXuUkFAp8/ac9reCl6as4r8biZUXAviecX8+sNuB/NTdvTLCt7sozEDc9K4BO4
beqLRsk3WjLxkZO/+HFZiGCPtN0l86Tid0HsRqTmKpapSXsWTBP5xJva+cGY3Bnr
BOv52IS1wnM1lwO7/NKasO96aB3utzlyWuH5ie/ihzCzhOqACpMKfoyhFPcQXz6G
7650d/CirLnfk8hDgRDdqE/DFStSKU+wFVK+phvdyB+18l+1t5XqTg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:49 2026 by rpki-client